reg key infection

could a malware blocked by nav leave an infected reg key? or would have to havw been installed?